ScanMalware.com

Security Scan Report: site-r9p1fb4xy.godaddysites.com

Site favicon
Submitted: Dec 3, 2025, 1:04:21 AMCompleted: Dec 3, 2025, 1:06:03 AMpubliccompleted
Loading additional data...

Summary

This website contacted 16 IPs in 2 countries across 7 domains to perform 66 HTTP transactions. The main domain is site-r9p1fb4xy.godaddysites.com.

Submitted URL: https://site-r9p1fb4xy.godaddysites.com/

The Cisco Umbrella rank of the primary domain is #190,603 of the top 1 million websites

AI Security Verdict

Confirmed Scam

Confidence: 95%

9
Risk Score

Confirmed phishing site impersonating Orange; do not provide any credentials.

Risk Factors
Brand impersonation on a low‑reputation, newly registered domain
Collection of login credentials (email and secret code) without authentication
Domain age < 7 days with a login form (triggers CONFIRMED_SCAM rule)
Low ranking in Cisco Umbrella (outside top 10k) while claiming a major brand
Domain age information unavailable

Details

Page Title

Orange-Mobile

Scan Type

public

Language

🇫🇷

French

(80% confidence)

Category

corporate

(50%)

Domain Information

You're looking at domain 'site-r9p1fb4xy.godaddysites.com' on the commercial generic top-level domain (.com) and includes subdomain 'site-r9p1fb4xy'. The second-level label 'godaddysites' is 12 characters long split between 4 vowels and 8 consonants. Word splitting yields two words: godaddy, sites. Expect six characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://site-r9p1fb4xy.godaddysites.com/

Page Load Overview

0.45s
Total Load Time
66
HTTP Requests
7
Domains
1.2 MB
Total Size

Language Analysis

Primary Language

🇫🇷French
Code: fr
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:fr
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:fr-FR
Text Length:551 chars
Detector Agreement:67%

Website Classification

Primary Category

corporate50% confidence
Type: spa
Method: structural

All Detected Categories

corporate
50%

Detected Features

OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
4723.207.210.143Frankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
5142.250.184.227United States
AS15169GOOGLE
423.207.210.148Frankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
413.248.243.5United States
AS16509AMAZON-02
4142.250.186.131United States
AS15169GOOGLE
4142.250.185.227United States
AS15169GOOGLE
476.223.105.230United States
AS16509AMAZON-02
4142.250.185.68United States
AS15169GOOGLE
42a00:1450:4001:80e::2003Frankfurt am Main, Hesse, Germany
AS15169GOOGLE
42a02:26f0:3500:2ba::228bFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
6616--

Detected Technologies1

HSTS
40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T19923A6532704022C82B34CF860F1BA447207A65FC562D6F0E6FD4D399BD56AD12BAB7E

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:BIaF3fTgKy6yZeVT0+w5TmHFSF4Aibi9Pjx83VG7gihESiLt0a:xvkKy6yZeVT1w5TmHQF4AycPFYVG7Gya

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:48306:CKCBsACCIBBVyaWJA9OIOZARATBdKCiBFiTAUrKBSDECSyABoMCQGUYQQQDickEwLkiKkAaCCgJIg2EQlEkAqgBnQ0cwSWAA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00c0fff0f0e081ff
Perceptual Hash:ee10196a623fc795
Difference Hash:01255a4505051b0b
Wavelet Hash:00c1fff0f0e081ff
Color Hash:#3ad22d

Other Hashes

Crop Resistant:01255a4505051b0b,000000002055a22c,9680969696808480,8600068696001480,2121212121212121,4848ca0a4c32524a

Scan History

Scan history not available

Unable to load historical scan data